CWE-416 · Use After Free (page 47)
Page 47 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26616 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned [BUG] There is a… |
CVE-2023-52491 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_… |
CVE-2024-27308 | High | 7.5 | 2024-03-06 | Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid tokens that correspond to named pipes… |
CVE-2024-2176 | High | 8.8 | 2024-03-06 | Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-50716 | Critical | 9.6 | 2024-03-06 | eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13… |
CVE-2024-26625 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: llc: call sock_orphan() at release time syzbot reported an interesting trace [1] caused b… |
CVE-2023-52600 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix uaf in jfs_evict_inode When the execution of diMount(ipimap) fails, the object i… |
CVE-2023-52584 | Low | 3.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: spmi: mediatek: Fix UAF on device remove The pmif driver data that contains the clocks is… |
CVE-2024-22253 | Critical | 9.3 | 2024-03-05 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges… |
CVE-2024-22252 | Critical | 9.3 | 2024-03-05 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges… |
CVE-2024-27929 | High | 7.1 | 2024-03-05 | ImageSharp is a managed, cross-platform, 2D graphics library. A heap-use-after-free flaw was found in ImageSharp's InitializeImage() function of PngDecoderCore… |
CVE-2024-26333 | Medium | 5.5 | 2024-03-05 | swftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at swftools/lib/modules/swfshape.c. |
CVE-2024-20833 | Medium | 4.1 | 2024-03-05 | Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause… |
CVE-2021-47106 | High | 7.8 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy() We need to use lis… |
CVE-2021-47103 | Critical | 9.8 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: inet: fully convert sk->sk_rx_dst to RCU rules syzbot reported various issues around earl… |
CVE-2021-47100 | Medium | 5.5 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module Hi, When testing install… |
CVE-2021-47088 | High | 7.0 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: protect targets destructions with kdamond_lock DAMON debugfs interface it… |
CVE-2024-0155 | High | 7.0 | 2024-03-04 | Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileged attacker could potentially exploit this vulner… |
CVE-2023-6241 | High | 7.0 | 2024-03-04 | Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GP… |
CVE-2023-43552 | Critical | 9.8 | 2024-03-04 | Memory corruption while processing MBSSID beacon containing several subelement IE. |
CVE-2023-43547 | High | 8.4 | 2024-03-04 | Memory corruption while invoking IOCTLs calls in Automotive Multimedia. |
CVE-2023-43546 | High | 8.4 | 2024-03-04 | Memory corruption while invoking HGSL IOCTL context create. |
CVE-2023-6143 | High | 8.4 | 2024-03-04 | Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GP… |
CVE-2024-26622 | High | 7.8 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: tomoyo: fix UAF write bug in tomoyo_write_control() Since tomoyo_write_control() updates… |
CVE-2023-46708 | Medium | 4.3 | 2024-03-04 | in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free. |
CVE-2023-52576 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code callin… |
CVE-2023-52572 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix UAF in cifs_demultiplex_thread() There is a UAF when xfstests on cifs: BUG… |
CVE-2023-52566 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() In nilfs_gccache… |
CVE-2023-52530 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by i… |
CVE-2023-52515 | Critical | 9.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has call… |
CVE-2023-52510 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ieee802154: ca8210: Fix a potential UAF in ca8210_probe If of_clk_add_provider() fails in… |
CVE-2023-52509 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ravb: Fix use-after-free issue in ravb_tx_timeout_work() The ravb_stop() should call canc… |
CVE-2023-52503 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix use-after-free vulnerability in amdtee_close_session There is a potentia… |
CVE-2023-52502 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a… |
CVE-2021-47081 | High | 7.8 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: habanalabs/gaudi: Fix a potential use after free in gaudi_memset_device_memory Our code a… |
CVE-2021-47078 | High | 7.8 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Clear all QP fields if creation failed rxe_qp_do_cleanup() relies on valid poin… |
CVE-2021-47068 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcp_sock_bind/connect Commits 8a4cd82d ("nfc: fix refcount l… |
CVE-2021-47063 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge detach If we don't call drm_connector_clea… |
CVE-2021-47061 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU If allocating a… |
CVE-2021-47058 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: regmap: set debugfs_name to NULL after it is freed There is a upstream commit cffa4b2122f… |
CVE-2021-46959 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: spi: Fix use-after-free with devm_spi_alloc_* We can't rely on the contents of the devres… |
CVE-2024-20765 | High | 7.8 | 2024-02-29 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2023-52483 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: mctp: perform route lookups under a RCU read-side lock Our current route lookups (mctp_ro… |
CVE-2023-52479 | High | 8.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in smb20_oplock_break_ack drop reference after use opinfo. |
CVE-2023-52475 | High | 7.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: Input: powermate - fix use-after-free in powermate_config_complete syzbot has found a use… |
CVE-2024-27284 | High | 7.5 | 2024-02-29 | cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to t… |
CVE-2024-23807 | Critical | 9.8 | 2024-02-29 | The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are reco… |
CVE-2023-51779 | High | 7.0 | 2024-02-29 | bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition. |
CVE-2024-1847 | High | 7.8 | 2024-02-28 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2021-47049 | High | 8.4 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" variable is added to… |
CVE-2021-47048 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op When handling op->addr… |
CVE-2021-47026 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: destroy sysfs after removing session from active list A session can be rem… |
CVE-2021-47017 | High | 8.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix a use after free in ath10k_htc_send_bundle In ath10k_htc_send_bundle, the bun… |
CVE-2021-47013 | Critical | 9.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send… |
CVE-2021-47012 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix a use after free in siw_alloc_mr Our code analyzer reported a UAF. In siw_… |
CVE-2021-46999 | Critical | 9.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: sctp: do asoc update earlier in sctp_sf_do_dupcook_a There's a panic that occurs in a few… |
CVE-2021-46998 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: ethernet:enic: Fix a use after free bug in enic_hard_start_xmit In enic_hard_start_xmit… |
CVE-2021-46991 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix use-after-free in i40e_client_subtask() Currently the call to i40e_client_del_i… |
CVE-2021-46988 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: userfaultfd: release page in error path to avoid BUG_ON Consider the following sequence o… |
CVE-2021-46986 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Free gadget structure only after freeing endpoints As part of commit e… |
CVE-2020-36785 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() The "s3a_buf" is free… |
CVE-2021-46973 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Avoid potential use after free in MHI send It is possible that the MHI ul_call… |
CVE-2021-46969 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Fix invalid error returning in mhi_queue mhi_queue returns an error when… |
CVE-2021-46966 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ACPI: custom_method: fix potential use-after-free issue In cm_write(), buf is always free… |
CVE-2021-46958 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between transaction aborts and fsyncs leading to use-after-free There is… |
CVE-2021-46936 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: fix use-after-free in tw_timer_handler A real world panic issue was found as follow… |
CVE-2021-46933 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. ffs_data_clear is indirectly call… |
CVE-2021-46930 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix list_head check warning This is caused by uninitialization of list_head. … |
CVE-2021-46929 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoint free by calling c… |
CVE-2024-26455 | High | 7.5 | 2024-02-26 | fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c. |
CVE-2019-25162 | High | 7.8 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only after we are done using… |
CVE-2024-25767 | Medium | 6.5 | 2024-02-26 | nanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c. |
CVE-2024-25763 | Medium | 5.5 | 2024-02-26 | openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c. |
CVE-2024-23839 | High | 7.1 | 2024-02-26 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, specially crafted traffi… |
CVE-2023-52469 | High | 7.8 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse_power_table When ps allocated by kzalloc… |
CVE-2023-52468 | High | 7.8 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: class: fix use-after-free in class_register() The lock_class_key is still registered and… |
CVE-2022-48626 | High | 7.8 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path It was reported that the mmc host str… |
CVE-2024-26598 | High | 8.8 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a potential U… |
CVE-2023-52457 | High | 7.8 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed Ret… |
CVE-2024-25385 | Medium | 6.2 | 2024-02-22 | An issue in flvmeta v.1.2.2 allows a local attacker to cause a denial of service via the flvmeta/src/flv.c:375:21 function in flv_close. |
CVE-2024-26592 | Critical | 9.8 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between the handling of a… |
CVE-2023-52447 | High | 7.8 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Defer the free of inner map when necessary When updating or deleting an inner map in… |
CVE-2023-52446 | High | 7.8 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a race condition between btf_put() and map_free() When running `./test_progs -j`… |
CVE-2023-52445 | High | 7.8 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread i… |
CVE-2024-23135 | High | 7.8 | 2024-02-22 | A maliciously crafted SLDPRT file in ASMkern228A.dll when parsed through Autodesk applications can be used in user-after-free vulnerability. This vulnerability… |
CVE-2024-23134 | High | 7.8 | 2024-02-22 | A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with oth… |
CVE-2024-26582 | Critical | 9.8 | 2024-02-21 | In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tls_decrypt_sg doesn't… |
CVE-2024-1673 | High | 8.8 | 2024-02-21 | Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially explo… |
CVE-2024-1670 | High | 8.8 | 2024-02-21 | Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2023-52438 | High | 7.8 | 2024-02-20 | In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in shinker's callback The mmap read lock is used during the sh… |
CVE-2024-23310 | Critical | 9.8 | 2024-02-20 | A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially cra… |
CVE-2024-25199 | High | 8.1 | 2024-02-20 | Inappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads t… |
CVE-2024-25198 | Critical | 9.1 | 2024-02-20 | Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2… |
CVE-2024-24794 | High | 8.1 | 2024-02-20 | A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can ca… |
CVE-2024-24793 | High | 8.1 | 2024-02-20 | A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can ca… |
CVE-2023-21165 | High | 7.8 | 2024-02-16 | In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privil… |
CVE-2023-40115 | High | 7.8 | 2024-02-15 | In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additi… |
CVE-2023-40114 | High | 7.8 | 2024-02-15 | In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege w… |
CVE-2023-40107 | High | 7.8 | 2024-02-15 | In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local escalation of privilege with no additio… |
CVE-2023-40100 | High | 7.8 | 2024-02-15 | In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege… |